CVE-2026-102764: beyondtrust remote_support

CVSS 9.8 (critical) · listed as exploited by CISA since 2026-10-16 · published 2026-10-15

The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.

Affected products (NVD): beyondtrust remote_support

Weakness: CWE-290

Source: NVD CVE-2026-102764

References

• https://beyondtrustcorp.service-now.com/csm?id=csm_kb_article&sysparm_article=KB0024066
• https://nvd.nist.gov/vuln/detail/CVE-2026-102764
• https://www.beyondtrust.com/blog/entry/bt26-05
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102764

Check your software

Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.